CVE-2020-14530

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: None. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successfu...

CVE-2020-14530

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: None. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successfu...

CVE-2020-14530

CVE-2020-14530 affects Oracle Security Service in Oracle Fusion Middleware (11.1.1.9.0). Description: unauthenticated attacker over HTTPS can access data within Oracle Security Service, indicating a confidentiality impact. CVSSv3.1 base score 5.9 (C:H, A:N) with network attack vector and high att...

CVE-2020-14530: Undefined Security Weakness

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: None. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successfu...

PT-2020-3372

Name of the Vulnerable Software and Affected Versions Oracle Security Service versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to the SSL API component of Oracle Security Service, which has inadequate access controls. This allows an unauthenticated attacker with networ...

CVE-2020-14655: Undefined Security Weakness

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: SSL API. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracl...

PT-2020-3863

Name of the Vulnerable Software and Affected Versions: Oracle Security Service version 11.1.1.9.0 Description: The issue allows an unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service, resulting in unauthorized access to critical data or complete access to...

Vulnerabilities fixed in Oracle Java SE

Oracle has fixed vulnerabilities in Oracle Java SE. A malicious party could exploit the vulnerabilities to execute arbitrary code or for causing a denial-of-service. ------------------.------.------------------------------------- | CVE ID | CVSS | Vector |...

CVE-2020-2757

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

The vulnerabilities of the RSA BSAFE Micro Edition Suite, Oracle Security Service, Oracle Database Server, Oracle Communications IP Service Activator, and Enterprise Manager Ops Center software-related to cryptographic key management failures allow attackers to trigger service failures.

The vulnerabilities of the RSA BSAFE Micro Edition Suite, Oracle Security Service, Oracle Database Server, the network software Oracle Communications IP Service Activator, and the virtualization management system Enterprise Manager Ops Center are related to errors in managing cryptographic keys...

Vulnerabilities of RSA BSAFE Micro Edition Suite and Oracle Security Service, Oracle Database Server database management system, Oracle Communications IP Service Activator network software, and Enterprise Manager Ops Center virtualization management system, caused by numerical overflows, allowing attackers to trigger service failures.

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are due to numerical...

The vulnerabilities of the RSA BSAFE Micro Edition Suite, BSAFE Crypto-C Micro Edition, and Oracle Security Service software; the Oracle Database Server database management system; the Oracle Communications IP Service Activator network software; and the Enterprise Manager Ops Center virtualization management system. These vulnerabilities involve uncontrolled resource consumption, allowing attackers to trigger service failures.

The vulnerabilities of the RSA BSAFE Micro Edition Suite, BSAFE Crypto-C Micro Edition, and Oracle Security Service, as well as the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center...

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system, related to errors in resource release, allow attackers to disclose protected information.

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service software, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are related...

Vulnerabilities of RSA BSAFE Micro Edition Suite and Oracle Security Service, Oracle Database Server, Oracle Communications IP Service Activator, and Enterprise Manager Ops Center – software solutions for virtualization management – are related to the use of cryptographic algorithms with vulnerabilities. This allows attackers to recover RSA keys.

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are related to the u...

Multiple vulnerabilities fixed in MySQL

Oracle has fixed several vulnerabilities in the MySQL connector, MySQL server and MySQL client. By exploiting the vulnerabilities, a malicious person with access to the the network read or manipulate data in the database or cause a denial-of-service. Oracle released updates to fix the...

Ubuntu 16.04 LTS / 18.04 LTS : MySQL vulnerabilities (USN-4195-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4195-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been...

CVE-2019-2431

CVE-2019-2431 affects Oracle Argus Safety, specifically the Console subcomponent, in versions 8.1 and 8.2 . The flaw allows an unauthenticated attacker with network access via HTTP to compromise Argus Safety, with exploitation requiring human interaction. The vulnerability can enable unauthorized...

PT-2018-3354

Name of the Vulnerable Software and Affected Versions: RSA BSAFE Micro Edition Suite versions prior to 4.0.11 in 4.0.x RSA BSAFE Micro Edition Suite versions prior to 4.1.6.1 in 4.1.x Oracle Security Service affected versions not specified Oracle Database Server affected versions not specified...

PT-2018-3352

Name of the Vulnerable Software and Affected Versions: RSA BSAFE Micro Edition Suite versions prior to 4.0.11 RSA BSAFE Micro Edition Suite versions prior to 4.1.6.1 Oracle Security Service affected versions not specified Oracle Database Server affected versions not specified Oracle Communication...

PT-2018-3351

Name of the Vulnerable Software and Affected Versions: RSA BSAFE Micro Edition Suite version 4.1.6 Oracle Security Service affected versions not specified Oracle Database Server affected versions not specified Oracle Communications IP Service Activator affected versions not specified Enterprise...